
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier: S1fgS/EKz9ITkAZH5BKaYrn9ATuGt89Z+ttqRS5o6uY=
Subject key identifier: F3:D0:20:81:8F:25:B0:ED:00:B2:00:11:25:17:E6:DB:66:6E:A8:89
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number: 0184
Signing time: Sun 05 Apr 2026 04:03:54 +0000
Manifest this update: Sun 05 Apr 2026 04:03:54 +0000
Manifest next update: Sun 12 Apr 2026 04:03:54 +0000
Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: Zi9WOdOOQZ0n53hD9HM/DH0YxFreRNRPRqUo5mFMTz0=)
2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: HMdh5qQbMBugOBpZmqbwDLsg01Y9XQwAxnZyu8Z1p8o=)
3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: Y/Om0EuE4DxLCw/qgrFqWJHVkuUt8pRbj21WLvoBDpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Validity
Not Before: Apr 5 04:03:54 2026 GMT
Not After : Apr 12 04:03:54 2026 GMT
Subject: CN=69d1df2a-3667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:1a:13:64:e1:85:db:b2:a1:1e:90:dd:38:
7b:63:d3:dc:15:0e:24:3d:10:ce:60:e6:14:a0:60:
2f:b1:2c:51:80:8b:2b:d8:db:4f:c6:b5:cb:a5:e4:
23:c0:0a:e7:71:e6:b9:10:89:0a:0b:df:12:05:34:
5c:bf:89:26:fd:8e:ae:f5:46:a6:15:40:b7:9e:e8:
e5:ca:f6:6a:f5:a9:e1:ef:35:9c:6c:51:be:32:3c:
56:f3:15:2b:07:47:ef:18:44:47:a2:3f:27:c1:e5:
8e:48:06:f9:57:27:73:e8:e7:bb:b0:1a:21:cd:3d:
dd:8e:de:68:f4:68:1e:62:97:ba:a5:89:3a:a2:3b:
95:6b:34:04:03:67:11:bc:2d:e1:56:e4:d0:32:92:
eb:43:3c:24:47:b3:2f:da:9f:77:11:57:79:e8:6b:
bd:07:df:68:21:19:33:a1:61:9d:50:28:cc:89:72:
58:f9:f6:80:69:56:9f:40:35:13:d5:7f:31:49:ce:
52:a2:15:0a:64:11:56:fe:d7:14:98:f3:44:94:2d:
a4:2b:43:93:3c:70:e6:50:d8:d3:96:93:da:2d:8e:
39:53:20:a4:8c:5b:9d:c2:36:5f:6d:ac:b6:da:08:
cb:a3:86:bf:46:31:14:f6:6f:27:29:64:bb:d2:e9:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:20:81:8F:25:B0:ED:00:B2:00:11:25:17:E6:DB:66:6E:A8:89
X509v3 Authority Key Identifier:
keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:cd:d6:a4:9a:e7:63:47:88:a2:d6:49:34:76:05:77:5a:d5:
7a:bc:98:ea:d0:4c:c8:99:b1:13:0d:10:ce:d1:bd:3a:0c:38:
f7:67:83:ca:d2:82:e8:a7:e3:88:86:89:4a:7f:ea:6b:49:f1:
76:0a:cf:55:87:f4:28:5e:6a:50:70:e3:4f:55:30:44:5e:61:
cb:aa:61:3b:38:37:65:cd:cc:74:38:95:34:6a:63:2e:6c:3b:
4d:28:f1:95:87:30:11:c6:38:27:26:91:63:02:39:06:c5:f8:
7b:45:a5:1a:50:35:2e:da:77:7f:e3:3e:c9:7c:33:8b:b1:de:
60:fd:ae:81:5c:03:79:3d:a5:e0:05:bc:30:b8:ce:24:b6:78:
67:5b:f4:ce:73:50:9e:65:d3:39:a8:89:fd:59:7a:2f:16:8e:
2b:84:ff:83:a7:dc:7c:99:34:6a:7c:09:4d:9b:5a:40:81:9a:
16:50:a6:ba:a2:88:19:7d:6a:af:84:32:4d:93:28:42:04:b2:
b4:3a:86:cd:09:75:32:40:6e:62:0e:5a:5c:c2:34:05:db:4e:
18:05:81:b3:24:8f:24:ba:d8:ae:72:bb:10:de:a6:23:3d:8d:
26:06:26:15:af:3d:80:e7:94:1a:53:02:1c:b3:fe:ce:58:54:
5b:32:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:45 2026 by rpki-client